CN113746916B - Third party service providing method, system and related nodes based on block chain - Google Patents

Third party service providing method, system and related nodes based on block chain Download PDF

Info

Publication number
CN113746916B
CN113746916B CN202111020261.6A CN202111020261A CN113746916B CN 113746916 B CN113746916 B CN 113746916B CN 202111020261 A CN202111020261 A CN 202111020261A CN 113746916 B CN113746916 B CN 113746916B
Authority
CN
China
Prior art keywords
internet
bid
party service
blockchain
party
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN202111020261.6A
Other languages
Chinese (zh)
Other versions
CN113746916A (en
Inventor
李慧玲
曾西平
柳京晖
杨树梅
胡键伟
张发振
朱建辉
车涵
伞颉
姚亚静
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Beijing Taier Yingfu Technology Co ltd
Original Assignee
Beijing Taier Yingfu Technology Co ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Beijing Taier Yingfu Technology Co ltd filed Critical Beijing Taier Yingfu Technology Co ltd
Priority to CN202111020261.6A priority Critical patent/CN113746916B/en
Publication of CN113746916A publication Critical patent/CN113746916A/en
Application granted granted Critical
Publication of CN113746916B publication Critical patent/CN113746916B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00Network arrangements or protocols for supporting network services or applications
    • H04L67/01Protocols
    • H04L67/06Protocols specially adapted for file transfer, e.g. file transfer protocol [FTP]
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/10Network architectures or network communication protocols for network security for controlling access to devices or network resources
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00Network arrangements or protocols for supporting network services or applications
    • H04L67/01Protocols
    • H04L67/10Protocols in which an application is distributed across nodes in the network
    • H04L67/1097Protocols in which an application is distributed across nodes in the network for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00Network arrangements or protocols for supporting network services or applications
    • H04L67/14Session management
    • H04L67/146Markers for unambiguous identification of a particular session, e.g. session cookie or URL-encoding
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00Network arrangements or protocols for supporting network services or applications
    • H04L67/50Network services
    • H04L67/53Network services using third party service providers

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Hardware Design (AREA)
  • Computer Security & Cryptography (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer And Data Communications (AREA)

Abstract

The invention discloses a third party service providing method and system based on a blockchain and a related node, wherein the method comprises the following steps: the method comprises the steps that an Internet of things device receives a third party service request initiated by a user; the third party service provider node generates an identity verification request according to the third party service request; the Internet of things device solves and separates out a third party BID document according to the verification request; obtaining a third party BID document fed back by the block chain according to the third party BID URL; comparing the analyzed third party BID document with the fed back third party BID document, and if the analyzed third party BID document is consistent with the fed back third party BID document, generating a verification response; the third party service provider node analyzes the BID document of the Internet of things equipment; obtaining an Internet of things device BID document fed back by the blockchain according to the Internet of things device BID URL; and comparing the analyzed BID document of the Internet of things equipment with the feedback BID document of the Internet of things equipment, and providing a third party service if the analyzed BID document of the Internet of things equipment is consistent with the feedback BID document of the Internet of things equipment. The invention can realize the safe provision of the third party service.

Description

Third party service providing method, system and related nodes based on block chain
Technical Field
The present invention relates to the field of blockchain technologies, and in particular, to a third party service providing method, system and related nodes based on blockchains.
Background
This section is intended to provide a background or context to the embodiments of the invention that are recited in the claims. The description herein is not admitted to be prior art by inclusion in this section.
The internet of things (IoT) has become an important area in communication and information technology. In recent years, many innovative services based on IoT technology have entered the market and are widely used.
Many IoT systems already have identity management modules and thus interoperability is required between different systems, for example, providing identity mapping services, mapping third party services and internet of things devices using existing mechanisms in the open internet of things identity association service (open internet of things ICS). The defects of the existing internet of things in providing a third party service scheme are that: the mapping information is easy to be tampered by adopting a centralized identity association service; ICS stores device information and device access information, which easily causes privacy disclosure. Therefore, the provision of the third party service scheme in the existing internet of things is not secure.
Disclosure of Invention
The embodiment of the invention provides a third party service providing method based on a blockchain, which is used for safely providing a third party service, wherein nodes of the third party service participants form a blockchain network; the third party service participant node comprises: the system comprises an Internet of things platform, a third party service provider node and Internet of things equipment; the method comprises the following steps:
The method comprises the steps that the Internet of things equipment receives a third party service request initiated by a user and sends the third party service request to an Internet of things platform to which the Internet of things equipment belongs; the third party service request comprises equipment information and service information, wherein the equipment information comprises an Internet of things equipment identifier, and the service information comprises a resource identifier URL of the third party service;
The Internet of things platform to which the Internet of things equipment belongs receives the third party service request and sends the third party service request to a block chain network;
the third party service provider node receives a third party service request sent by the blockchain network, generates an identity verification request according to the third party service request, and sends the verification request to the blockchain network; the verification request comprises a blockchain identification BID and a third party BID URL of a third party service provider;
the method comprises the steps that an internet of things platform receives a verification request sent through a blockchain network and sends the verification request to internet of things equipment;
The Internet of things device analyzes a third party BID document according to the BID of the third party service provider in the verification request; obtaining BIDs of the third party service provider registered in advance on the blockchain from the blockchain network according to verification attributes corresponding to the third party BID URLs, and obtaining third party BID documents fed back by the blockchain according to the BIDs of the third party service provider on the blockchain; comparing the analyzed third party BID document with the third party BID document fed back by the blockchain, if the third party BID document is consistent with the third party BID document, generating a verification response, and sending the verification response to the Internet of things platform; the verification response comprises BID of the Internet of things equipment and BID URL of the Internet of things equipment;
the method comprises the steps that an internet of things platform receives a verification response sent by a block chain network and sends the verification response to the block chain network;
The third party service provider node receives the verification response sent by the blockchain network, and analyzes the BID document of the Internet of things device according to the BID of the Internet of things device; obtaining the BID of the Internet of things equipment which is registered on the blockchain in advance from the blockchain network according to the verification attribute corresponding to the BID URL of the Internet of things equipment, and obtaining a BID document of the Internet of things equipment fed back by the blockchain according to the BID of the Internet of things equipment on the blockchain; and comparing the analyzed BID document of the Internet of things equipment with the BID document of the Internet of things equipment fed back by the blockchain, and providing a third party service if the analyzed BID document of the Internet of things equipment is consistent with the BID document of the Internet of things equipment fed back by the blockchain.
The embodiment of the invention also provides a third party service providing method based on the blockchain, which is used for realizing the safe provision of the third party service, wherein the nodes of the third party service participants form a blockchain network; the third party service participant node comprises: the system comprises an Internet of things platform, a third party service provider node and Internet of things equipment; the method comprises the following steps:
Receiving a third party service request initiated by a user; the third party service request comprises equipment information and service information, wherein the equipment information comprises an Internet of things equipment identifier, and the service information comprises a resource identifier URL of the third party service;
Sending a third party service request to an Internet of things platform to which the Internet of things equipment belongs;
receiving a verification request sent by an Internet of things platform; the verification request comprises a blockchain identification BID and a third party BID URL of a third party service provider;
Analyzing a third party BID document according to the BID of the third party service provider in the verification request;
obtaining BIDs of the third party service provider registered in advance on the blockchain from the blockchain network according to verification attributes corresponding to the third party BID URLs;
obtaining a third party BID document fed back by the blockchain according to the BID of a third party service provider on the blockchain;
Comparing the analyzed third party BID document with the third party BID document fed back by the blockchain, and if the analyzed third party BID document is consistent with the third party BID document fed back by the blockchain, generating a verification response; the verification response comprises BID of the Internet of things equipment and BID URL of the Internet of things equipment;
and sending the verification response to the Internet of things platform.
The embodiment of the invention also provides a third party service providing method based on the blockchain, which is used for realizing the safe provision of the third party service, wherein the nodes of the third party service participants form a blockchain network; the third party service participant node comprises: the system comprises an Internet of things platform, a third party service provider node and Internet of things equipment; the method comprises the following steps:
Receiving a third party service request sent by a block chain network; the third party service request comprises equipment information and service information, wherein the equipment information comprises an Internet of things equipment identifier, and the service information comprises a resource identifier URL of the third party service;
Generating an identity verification request according to the third party service request; the verification request comprises a blockchain identification BID and a third party BID URL of a third party service provider;
Sending a validation request to a blockchain network;
Receiving a verification response sent through the blockchain network; the verification response comprises BID of the Internet of things equipment and BID URL of the Internet of things equipment;
according to BID of the Internet of things equipment, analyzing an Internet of things equipment BID document;
Obtaining the BID of the Internet of things equipment pre-registered on the blockchain from the blockchain network according to the verification attribute corresponding to the BID URL of the Internet of things equipment;
obtaining an Internet of things device BID document fed back by the blockchain according to the Internet of things device BID on the blockchain;
And comparing the analyzed BID document of the Internet of things equipment with the BID document of the Internet of things equipment fed back by the blockchain, and providing a third party service if the analyzed BID document of the Internet of things equipment is consistent with the BID document of the Internet of things equipment fed back by the blockchain.
The embodiment of the invention also provides a third party service providing system based on the blockchain, which is used for realizing the safe provision of the third party service, wherein the nodes of the third party service participants form a blockchain network; the third party service participant node comprises: the system comprises an Internet of things platform, a third party service provider node and Internet of things equipment; the system comprises:
The internet of things device is used for receiving a third party service request initiated by a user and sending the third party service request to an internet of things platform to which the internet of things device belongs; the third party service request comprises equipment information and service information, wherein the equipment information comprises an Internet of things equipment identifier, and the service information comprises a resource identifier URL of the third party service; analyzing a third party BID document according to the BID of the third party service provider in the verification request; obtaining BIDs of the third party service provider registered in advance on the blockchain from the blockchain network according to verification attributes corresponding to the third party BID URLs, and obtaining third party BID documents fed back by the blockchain according to the BIDs of the third party service provider on the blockchain; comparing the analyzed third party BID document with the third party BID document fed back by the blockchain, if the third party BID document is consistent with the third party BID document, generating a verification response, and sending the verification response to the Internet of things platform; the verification response comprises BID of the Internet of things equipment and BID URL of the Internet of things equipment;
The internet of things platform is used for receiving the third party service request and sending the third party service request to a blockchain network; receiving a verification request sent by a block chain network, and sending the verification request to the Internet of things equipment; receiving a verification response sent by the block chain network, and sending the verification response to the block chain network;
The third party service provider node is used for receiving a third party service request sent by the blockchain network, generating an identity verification request according to the third party service request, and sending the verification request to the blockchain network; the verification request comprises a blockchain identification BID and a third party BID URL of a third party service provider; receiving a verification response sent by a block chain network, and analyzing an Internet of things device BID document according to the BID of the Internet of things device; obtaining the BID of the Internet of things equipment which is registered on the blockchain in advance from the blockchain network according to the verification attribute corresponding to the BID URL of the Internet of things equipment, and obtaining a BID document of the Internet of things equipment fed back by the blockchain according to the BID of the Internet of things equipment on the blockchain; and comparing the analyzed BID document of the Internet of things equipment with the BID document of the Internet of things equipment fed back by the blockchain, and providing a third party service if the analyzed BID document of the Internet of things equipment is consistent with the BID document of the Internet of things equipment fed back by the blockchain.
The embodiment of the invention also provides third party service providing Internet of things equipment based on the blockchain, which is used for safely providing third party service, and the nodes of the third party service participants form a blockchain network; the third party service participant node comprises: the system comprises an Internet of things platform, a third party service provider node and Internet of things equipment; this thing networking device includes:
The first receiving unit is used for receiving a third party service request initiated by a user; receiving a verification request sent by an Internet of things platform; the third party service request comprises equipment information and service information, wherein the equipment information comprises an Internet of things equipment identifier, and the service information comprises a resource identifier URL of the third party service; the verification request comprises a blockchain identification BID and a third party BID URL of a third party service provider;
the first sending unit is used for sending the third party service request to an Internet of things platform to which the Internet of things equipment belongs; sending the verification response to the Internet of things platform;
The first analyzing unit is used for analyzing the third party BID document according to the BID of the third party service provider in the verification request;
A first obtaining unit, configured to obtain, from a blockchain network, a BID of a third party service provider registered in advance on a blockchain according to a verification attribute corresponding to a third party BID URL;
the first determining unit is used for obtaining a third party BID document fed back by the blockchain according to the BID of a third party service provider on the blockchain;
the first comparison unit is used for comparing the analyzed third party BID document with the third party BID document fed back by the blockchain;
the first generation unit is used for generating a verification response when the analyzed third party BID document is consistent with the third party BID document fed back by the blockchain; the verification response comprises BID of the Internet of things equipment and BID URL of the Internet of things equipment.
The embodiment of the invention also provides a third party service provider node based on the blockchain, which is used for realizing the safe provision of the third party service, and the third party service participant nodes form a blockchain network; the third party service participant node comprises: the system comprises an Internet of things platform, a third party service provider node and Internet of things equipment; the third party service provider node comprises:
The second receiving unit is used for receiving a third party service request sent by the block chain network; receiving a verification response sent through the blockchain network; the third party service request comprises equipment information and service information, wherein the equipment information comprises an Internet of things equipment identifier, and the service information comprises a resource identifier URL of the third party service; the verification response comprises BID of the Internet of things equipment and BID URL of the Internet of things equipment;
the second generation unit is used for generating an identity verification request according to the third-party service request; the verification request comprises a blockchain identification BID and a third party BID URL of a third party service provider;
a second transmitting unit for transmitting the authentication request to the blockchain network;
The second analysis unit is used for analyzing the BID document of the Internet of things equipment according to the BID of the Internet of things equipment;
the second obtaining unit is used for obtaining the BID of the Internet of things equipment which is registered on the blockchain in advance from the blockchain network according to the verification attribute corresponding to the BID URL of the Internet of things equipment;
the second determining unit is used for obtaining an Internet of things device BID document fed back by the blockchain according to the Internet of things device BID on the blockchain;
the second comparison unit is used for comparing the analyzed BID document of the Internet of things equipment with the BID document of the Internet of things equipment fed back by the blockchain;
The providing unit is used for providing a third party service when the analyzed BID document of the Internet of things device is consistent with the BID document of the Internet of things device fed back by the blockchain.
The embodiment of the invention also provides computer equipment, which comprises a memory, a processor and a computer program stored on the memory and capable of running on the processor, wherein the third party service providing method based on the block chain is realized when the processor executes the computer program.
The embodiment of the invention also provides a computer readable storage medium which stores a computer program for executing the third party service providing method based on the blockchain.
In the embodiment of the invention, in a third party service providing scheme based on a block chain, a third party service participant node forms a block chain network; the third party service participant node comprises: the internet of things platform, third party service provider node and internet of things equipment, through: the method comprises the steps that the Internet of things equipment receives a third party service request initiated by a user and sends the third party service request to an Internet of things platform to which the Internet of things equipment belongs; the third party service request comprises equipment information and service information, wherein the equipment information comprises an Internet of things equipment identifier, and the service information comprises a resource identifier URL of the third party service; the Internet of things platform to which the Internet of things equipment belongs receives the third party service request and sends the third party service request to a block chain network; the third party service provider node receives a third party service request sent by the blockchain network, generates an identity verification request according to the third party service request, and sends the verification request to the blockchain network; the verification request comprises a blockchain identification BID and a third party BID URL of a third party service provider; the method comprises the steps that an internet of things platform receives a verification request sent through a blockchain network and sends the verification request to internet of things equipment; the Internet of things device analyzes a third party BID document according to the BID of the third party service provider in the verification request; obtaining BIDs of the third party service provider registered in advance on the blockchain from the blockchain network according to verification attributes corresponding to the third party BID URLs, and obtaining third party BID documents fed back by the blockchain according to the BIDs of the third party service provider on the blockchain; comparing the analyzed third party BID document with the third party BID document fed back by the blockchain, if the third party BID document is consistent with the third party BID document, generating a verification response, and sending the verification response to the Internet of things platform; the verification response comprises BID of the Internet of things equipment and BID URL of the Internet of things equipment; the method comprises the steps that an internet of things platform receives a verification response sent by a block chain network and sends the verification response to the block chain network; the third party service provider node receives the verification response sent by the blockchain network, and analyzes the BID document of the Internet of things device according to the BID of the Internet of things device; obtaining the BID of the Internet of things equipment which is registered on the blockchain in advance from the blockchain network according to the verification attribute corresponding to the BID URL of the Internet of things equipment, and obtaining a BID document of the Internet of things equipment fed back by the blockchain according to the BID of the Internet of things equipment on the blockchain; and comparing the analyzed BID document of the Internet of things equipment with the BID document of the Internet of things equipment fed back by the blockchain, and providing the third party service if the BID document is consistent with the BID document of the Internet of things equipment fed back by the blockchain, so that the third party service can be safely provided.
Drawings
In order to more clearly illustrate the embodiments of the invention or the technical solutions in the prior art, the drawings that are required in the embodiments or the description of the prior art will be briefly described, it being obvious that the drawings in the following description are only some embodiments of the invention, and that other drawings may be obtained according to these drawings without inventive effort for a person skilled in the art. In the drawings:
Fig. 1 is a schematic diagram of an open IoT identity-related service in the prior art;
FIG. 2 is a schematic diagram of a prior art identity mapping process;
FIG. 3 is a schematic diagram of an identity relationship acquisition process in the prior art;
FIG. 4 is a schematic diagram of a prior art authorization and access control process;
FIG. 5 is a flowchart of a third party service providing method based on blockchain applied to a system in an embodiment of the present invention;
FIG. 6 is a schematic diagram of a third party service provider method based on blockchain for a system in accordance with an embodiment of the present invention;
FIG. 7 is a schematic diagram of a third party service providing process based on blockchain for a system according to an embodiment of the present invention;
FIG. 8 is a flowchart of a third party service providing method based on blockchain applied to an Internet of things device according to an embodiment of the present invention;
FIG. 9 is a flowchart of a third party service providing method based on blockchain applied to a third party service provider node in accordance with an embodiment of the present invention;
FIG. 10 is a block chain based third party service providing system according to an embodiment of the present invention;
FIG. 11 is a schematic structural diagram of a third party service providing IOT device based on blockchain in an embodiment of the present invention;
FIG. 12 is a schematic diagram of a third party service provider node based on blockchain in accordance with an embodiment of the present invention;
FIG. 13 is a diagram illustrating the relationship between BID and BID document, VC in an embodiment of the present invention;
FIG. 14 is a schematic diagram of BID structure according to an embodiment of the invention.
Detailed Description
For the purpose of making the objects, technical solutions and advantages of the embodiments of the present invention more apparent, the embodiments of the present invention will be described in further detail with reference to the accompanying drawings. The exemplary embodiments of the present invention and their descriptions herein are for the purpose of explaining the present invention, but are not to be construed as limiting the invention.
Before describing embodiments of the present invention, the terms related to the present invention will be described first.
Iot— Internet of Things internet of things; ICS- - -Identity Correlation Service identity association service; DID- - -Decentralized Identifier distributed identities; BID- - -Blockchain-based Identifier blockchain identification; UTI- - -Uniform Transaction Identifier unique transaction identifier; URI- - -Uniform Resource Identifier Uniform resource identifier; SP- -Service Provider; SIOP- - -Self-Issued OpenID Connect Provider provides a program from the distributed open identity connection.
The following describes the problem found by the inventor to provide the third party service and the idea of the invention.
As shown in fig. 1, a user may hold multiple accounts in different third party service providers that may provide various services such as online shopping services, digital cinema and music rental services, e-commerce, and the like. Furthermore, the internet of things device (e.g., a smart refrigerator) has been connected to its own internet of things service provider, which is in the cloud of the internet of things device manufacturer. The internet of things service provider provides cloud-based internet of things device management functions such as notifications, instructions, firmware updates, etc. The internet of things service provider running on the internet of things device manufacturer cloud needs to associate with a third party service provider in order to obtain various services for the internet of things device. For example, when the intelligent refrigerator detects that the egg inventory is insufficient, it may automatically order eggs from an online supermarket (third party service) or play songs on demand using speakers of a music rental company (third party service) inside the refrigerator.
In order to enable the internet of things device to access a plurality of third party services, an open internet of things identification related service (open internet of things ICS) provides an effective way to connect a service provider of the internet of things and various third party service providers, and the internet of things device can access the third party services through a mapping relationship of the open internet of things ICS. The open internet of things ICS provides identity mapping services for internet of things service providers and third party service providers. Furthermore, the open internet of things ICS should be a stand-alone non-proprietary service and service provider, independent of the internet of things device provider or vertical industry.
The open internet of things ICS maps third party services and internet of things devices. In order to form the mapping relationship, a Unique Transaction Identifier (UTI) provided by a third party service provider, an identifier of a specific service, and an identifier of an internet of things device need to be filled in the mapping relationship. Once the mapping relationship is established, the internet of things device may request a plurality of services from a third party service provider through the internet of things service provider, as shown in fig. 1. The open internet of things ICS should provide URI and UTI to the internet of things device, which can use this information to request a third party service.
That is, in the conventional scheme, an identity-related service platform is provided, which maps the identity of the device, the service provider and the service, and performs service authentication between the device and the service provider, so that the device can access the third party service.
The identity mapping in the conventional scheme is shown in fig. 2, and the steps are as follows:
Step 1: the third party service provider sends an IoT device mapping request to the open internet of things ICS platform, where the request includes information such as a service URI (uniform resource identifier), UTI (unique transaction identifier), and an IoT device serial number.
Step 2: upon receiving the request, the open internet of things ICS (identity association service) platform stores the URI and UTI as an initial identity mapping table, the full table being created in step 8.
Step 3: the open internet of things ICS sends mapping information to the IoT service provider, including the service URI, UTI, and IoT device serial number.
Step 4: the Internet of things service provider finds the mapping relation between the Internet of things equipment and the equipment serial number, and sends the mapping relation to the Internet of things equipment, wherein the mapping relation comprises URI and UTI.
Step 5: the device stores the service URI and UTI into an internal store.
Step 6: the device notifies the internet of things service provider of the receipt of the URI and UTI.
Step 7: the internet of things service provider sends the internet of things device ID to the open internet of things ICS.
Step 8: the open internet of things ICS creates an identity mapping table (as shown in table 1 below) containing device IDs, service URIs and UTIs.
TABLE 1
Device ID Service URI UTI
Step 9: the open internet of things ICS sends a response to the third party identity service provider and the internet of things device provider indicating the result of the identity mapping.
In this scenario, the identity relationship acquisition and rights verification process is shown in FIGS. 3 and 4. As shown in fig. 3, the process of acquiring the identity relationship includes:
Step 1: a third party service provider requests access to the identity mapping information.
Step 2: upon receiving the request, the open Internet of things ICS queries the mapping table. If the service URI and the UTI are in the same row, the ICS of the open Internet of things can acquire the device ID corresponding to the service URI UTI.
Step 3: if the corresponding row exists in the mapping table, the open Internet of things ICS returns a response with the device ID to the third party service provider, otherwise, the open Internet of things ICS returns an error message.
As shown in fig. 4, the authorization and access control flow includes:
Step 1: the IoT service provider provides credentials to the open internet of things ICS.
Step 2: the open internet of things ICS verifies certificate validity.
Step 3: the open internet of things ICS issues certificates to IoT service providers.
Step 4-6: a process for IoT service providers to verify certificates.
In summary, the existing third party service providing in the internet of things has the following disadvantages:
1) With a centralized identity-related service, the mapping information is easily tampered with.
2) ICS stores device information and device access information, which easily causes privacy disclosure.
In summary, in order to solve the technical problem existing in the providing of the third party service in the prior art, the inventor proposes a third party service providing scheme based on a blockchain, the scheme relates to a third party service identity verification framework based on a distributed digital identity, and the scheme does not store an equipment ID in a centralized service provider, so that information is prevented from being tampered; the access information of the device is not stored to protect user privacy. The third party service providing scheme based on the blockchain is described in detail below.
FIG. 5 is a flow chart of a third party service providing method based on blockchain applied to a system in an embodiment of the invention, wherein third party service participant nodes form a blockchain network; the third party service participant node comprises: the method comprises the following steps of:
step 101: the method comprises the steps that the Internet of things equipment receives a third party service request initiated by a user and sends the third party service request to an Internet of things platform to which the Internet of things equipment belongs; the third party service request comprises equipment information and service information, wherein the equipment information comprises an Internet of things equipment identifier, and the service information comprises a resource identifier URL of the third party service;
Step 102: the Internet of things platform to which the Internet of things equipment belongs receives the third party service request and sends the third party service request to a block chain network;
Step 103: the third party service provider node receives a third party service request sent by the blockchain network, generates an identity verification request according to the third party service request, and sends the verification request to the blockchain network; the verification request comprises a blockchain identification BID and a third party BID URL of a third party service provider;
step 104: the method comprises the steps that an internet of things platform receives a verification request sent through a blockchain network and sends the verification request to internet of things equipment;
Step 105: the Internet of things device analyzes a third party BID document according to the BID of the third party service provider in the verification request; obtaining BIDs of the third party service provider registered in advance on the blockchain from the blockchain network according to verification attributes corresponding to the third party BID URLs, and obtaining third party BID documents fed back by the blockchain according to the BIDs of the third party service provider on the blockchain; comparing the analyzed third party BID document with the third party BID document fed back by the blockchain, if the third party BID document is consistent with the third party BID document, generating a verification response, and sending the verification response to the Internet of things platform; the verification response comprises BID of the Internet of things equipment and BID URL of the Internet of things equipment;
step 106: the method comprises the steps that an internet of things platform receives a verification response sent by a block chain network and sends the verification response to the block chain network;
Step 107: the third party service provider node receives the verification response sent by the blockchain network, and analyzes the BID document of the Internet of things device according to the BID of the Internet of things device; obtaining the BID of the Internet of things equipment which is registered on the blockchain in advance from the blockchain network according to the verification attribute corresponding to the BID URL of the Internet of things equipment, and obtaining a BID document of the Internet of things equipment fed back by the blockchain according to the BID of the Internet of things equipment on the blockchain; and comparing the analyzed BID document of the Internet of things equipment with the BID document of the Internet of things equipment fed back by the blockchain, and providing a third party service if the analyzed BID document of the Internet of things equipment is consistent with the BID document of the Internet of things equipment fed back by the blockchain.
The third party service providing method based on the blockchain provided by the embodiment of the invention does not store the device ID in the centralized service provider, so that the information is prevented from being tampered; access information of the device is not stored so as to protect privacy of users, and safe provision of third party services can be realized. The following is a detailed description.
As shown in fig. 6, the third party service providing method based on the blockchain may include:
Step 1: the device registers the BID identity through the SIOP, and the SIOP can autonomously generate the BID identity through the SDK at the device side.
Step 2: the BID identity is registered to the chain, and the BID (Blockchain-based Identifier) is composed of a BID identity, a BID document, and a verifiable certificate (VC, verifiable credentials) based on a distributed Identifier of the blockchain.
Step 3: the IoT service provider issues a certificate VC for the device and registers the certificate on the chain. VC (Verifiable Credentials): the verifiable certificate is a tamper-resistant certificate that can cryptographically verify the identity of the issuer, and can be used to construct a verifiable representation, or can be cryptographically verified. The claims in the certificate may relate to different principals.
Steps 1 to 3 are preparation steps before providing the third party service. As described in the foregoing steps 1 to 3, in one embodiment, according to fig. 6, the foregoing blockchain-based third party service providing method may further include pre-registering the internet of things device BID on the blockchain according to the following method:
Obtaining the BID of the Internet of things equipment through a self-distributing open identity connection providing program SIOP installed on the Internet of things equipment; and initiating a registration request according to the BID of the Internet of things equipment to obtain the BID of the Internet of things equipment.
In specific implementation, SIOP issues BID for the Internet of things equipment to generate BID documents. If the internet of things equipment needs to apply for the certificate VC, applying for the internet of things platform, and issuing the certificate for the internet of things equipment by the internet of things platform. The method for registering the BID of the Internet of things device on the blockchain in advance further improves the safety of providing the third party service. In addition, the step of registering the identity of the party such as the third party service provider to the blockchain may refer to the step of registering the internet of things device BID to the blockchain in advance as described above.
Step 4: the device requests a service (third party service request) from a third party service provider, steps 101-102 described above.
Step5: the third party service provider sends an authentication request, steps 103-104 described above.
Step 6: the device side (the internet of things device) performs identity authentication, and returns an authentication result, namely the step 105.
Step 7: the application providing the service is notified of the authentication result (authentication response), i.e., steps 106 to 107 described above.
As shown in fig. 7, the detailed procedure of the request access and authentication process from the step 4 is as follows:
Step 1: the device sends a service request (third party service request) to a third party service provider, the request including device information and service information. Wherein: the device information may include: a client ID (internet of things device identification) through which the device requests a service; the service information may include: the resource identification of the request: such as a URI.
Step 2: the third party service provider generates a verification request requesting a SIOP for verifying the device identity and the service request. Wherein the authentication request may include the following: BID: the BID of the third party can be analyzed to obtain a BID document of the third party for identity verification; BID URL: an attribute pointing to a third party identity, BID, representing an attribute to be verified, such as a verification public key; type of response: such as identity token type; the range is as follows: i.e. the protocol type of the following identity authentication, for the two parties to execute according to the appointed protocol; encrypting the authentication request, i.e., in one embodiment, the third party service provider node receives a third party service request sent over the blockchain network, generates an authentication request based on the third party service request, and sends the authentication request to the blockchain network may include: and the third party service provider node receives the third party service request sent by the blockchain network, generates an identity verification request according to the third party service request, encrypts the verification request, and sends the encrypted verification request to the blockchain network. In the specific implementation, the verification request is encrypted and then sent out, so that the security provided by the third party service is further improved.
Step 3: the third party service provider sends a verification request to the internet of things device.
Step 4: the internet of things device verifies the request locally and on the chain through the installed SIOP.
Request authentication includes: decrypting the authentication request; and (3) verifying the validity of the identity of the third party: and analyzing the BID document according to the BID of the third party, and carrying out attribute comparison and verification by SIOP in the equipment according to the attribute to be verified in the BID URL and finding the BID document of the third party on the chain. In implementation, the BID of the third party service provider registered in advance on the blockchain is obtained from the blockchain network, which may be obtained from a leader node (master node) selected from all the third party service participant nodes, or may be obtained when the same proportion of the BID fed back by each third party service participant node exceeds a preset threshold.
Step 5: the SIOP generates a validation response. The verification response may include: BID of SIOP, namely BID of the Internet of things equipment; BID URL of SIOP, namely thing networking equipment BID URL: pointing to an attribute to be verified; an identity token comprising an issuer, a random number, an expiration time, an encryption method, a principal to which the issuer belongs, etc.; signing the verification response; the authentication response is encrypted.
Step 6: the internet of things device sends the authentication response to the third party service provider.
Step 7: the third party service provider verifies the received response, including the following: decrypting the response; verifying the response signature; and (3) verifying SIOP identity validity: analyzing the SIOP BID document by the SIOP BID, and comparing whether the attribute of the BID document is consistent with the attribute to be verified pointed by the BID URL in the verification response; specifically, the manner in which the BID of the internet of things device pre-registered on the blockchain is obtained from the blockchain network may be referred to above as the manner in which the BID of the third party service provider is obtained from the blockchain network. And (5) verifying the token.
From the foregoing, in one embodiment, the third party service providing method based on the blockchain may further include:
the internet of things device signs and encrypts the verification response; the third party service provider node performs signing and decryption processing on the verification response sent through the blockchain network.
In the specific implementation, the internet of things equipment signs and encrypts the verification response, and then the third party service provider node performs signature verification and decryption on the verification response, so that the security provided by the third party service is further improved.
From the foregoing, in one embodiment, the verification request may further include: a validation response type and a validation protocol type; the validation response further includes: and verifying the content corresponding to the response type.
Step 8: if validated, the third party service provider provides services to the device.
In order to facilitate a better understanding of the present invention, the BID will be described in detail. As shown in fig. 13, BID (Blockchain-based Identifier), based on a blockchain distributed Identifier, is composed of BID document and verifiable certificate (VC, verifiable credentials).
TABLE 2
BID documents typically contain information about the BID document, such as encryption to prove who the BID holder is, as shown in Table 2 above. Where id is a necessary attribute.
In one embodiment, registering a blockchain identification BID for the internet of things device may include:
Generating an original public-private key pair according to the encryption type, and carrying out hash operation on the original public key according to the original public-private key pair to obtain a hash operation value; obtaining hash length and coding type to be intercepted according to the coding type, intercepting the hash operation value according to the hash length and the coding type to be intercepted, and then coding to generate a byte array as a suffix;
Adding a coding type in front of the suffix to obtain a byte array updated once;
adding an encryption type in front of the byte array updated once to obtain a byte array updated twice;
If the generated BID belongs to the BID of the sub-chain of the block chain, adding a corresponding chain code in front of the byte array updated for the second time to obtain a byte array updated for the third time;
and adding a prefix in front of the byte array updated for three times to obtain the BID.
In particular, as shown in fig. 14, the composition of the BID may include:
(1) Prefix: the prefix of BID is a fixed character string of 'BID:', wherein BID: BID lowercase.
(2) ChainCode: the four-bit code consisting of lower case letters or numbers has no ChainCode BIDs on the star fire chain main chain, and the BIDs on the sub chains are added with ChainCode of the sub chains between prefix suffixes, so that the addresses of the same account controlled by the same private key on different sub chains can be distinguished.
(3) ChainCode is the unique code representing the validity of the sub-link in the star fire-link network, and is the sub-link identity code (abbreviated as link code) issued by the backbone node to apply for the super node. When the chain code is applied, the backbone node needs to submit the industry, the name, the number, the introduction, the equipment fingerprint information, the routing address (including equipment IP and ports) and the like of the sub-chain, and the super node signs the chain code with the super node signature to the backbone node after checking, so that the sub-chain generates the BID identifier thereof through ChainCode, and the addressing function in the whole chain group is realized.
(4) Encryption type: the encryption algorithm type of the BID original public and private key pair is generated and is expressed by a lowercase letter, the currently supported encryption types are an international encryption algorithm ED25519, secp k1 and a national encryption algorithm SM2, and the specific encryption type and the mapping relation of the public and private key to the encryption algorithm are shown in the following table 3:
Encryption type Public-private key support algorithm
‘e’ ED25519
‘z’ SM2
‘s’ Secp256k1
Other lowercase letters Reserved to be expanded
TABLE 3 Table 3
(5) Coding type: the suffix coding algorithm and the length of the truncated public key hash support three coding algorithms of Base58, bech32 and Base64 at present, and the length of the truncated public key hash is 22 bytes. The mapping relation between the specific coding mode and the hash length of the public key and the coding type is shown in the following table 4:
Coding type Coding mode Intercepting public key hash length
‘f’ Base58 22
‘s’ Base64 22
‘t’ Bech32 22
Other lowercase letters Reserved to be expanded Reserved to be expanded
TABLE 4 Table 4
(6) Suffix: the public key is intercepted after a hash algorithm, then the character string is obtained after encoding, and the lengths of suffixes generated by different encoding modes are different. The specific generation rule is described in BID, namely BID address generation flow.
In specific implementation, the following describes a process of generating a BID, namely, a BID address generating flow, with reference to fig. 14:
First, generating an original public-private key pair: and generating an original public and private key pair according to the encryption algorithm type.
Second, calculating the hash of the original public key: and (3) carrying out hash operation on the original public key according to the original public-private key pair generated in the first step to obtain an output abstract (256-bit/32-Byte) with a fixed length. The generation algorithms of the original public and private key pairs are different, and the corresponding hash algorithms are also different, and specifically, the method is as follows: the hash algorithm corresponding to SM2 is SM3; the corresponding hash algorithm for ED25519 or Secp k1 is SHA-256.
Thirdly, generating codes: and obtaining the hash length to be intercepted and the type of the coding algorithm according to the coding type, intercepting the hash generated in the last step, and then coding to generate a corresponding byte array.
Fourth, adding coding types: and adding the coding type in front of the byte array after the last step of coding is finished, and generating a new byte array.
Fifthly, adding an encryption algorithm type prefix: and adding an encryption type in front of the byte array in the last step to generate a new byte array.
Sixth, chainCode is added: if BID of the main chain is generated, skipping the step; if the generated BID is a sub-chain, adding corresponding ChainCode +' before the byte array in the last step.
Seventh, adding Prefix: prefix is a fixed string value "BID:", and the last result of the last step is the final value of BID after the Prefix is added.
In one embodiment, the processing method of the block chain-based internet of things device may further include: and adding the equipment information of the Internet of things equipment to the suffix when the suffix is generated.
In specific implementation, aiming at the problems that the equipment identity is easy to tamper and imitate due to single input information in the equipment ID generation, the embodiment of the invention adopts a BID generation mode of multidimensional information to solve the problems. The former five steps are the same as the former BID generation mode, and when generating the suffix, equipment information such as manufacturer ID, production date, production batch number, inspector and the like can be added to form a multi-dimensional BID generation mode.
In order to facilitate understanding of how the present invention may be practiced, an example will now be described.
The workflow of the embodiment of the present invention is described below by taking an example that the internet of things device a subscribes online to a music service provided by a third party internet of things service provider.
1. Blockchain composition: the platform service provider and the third party service provider of the internet of things can be used as blockchain nodes to form a blockchain network, and records transactions (including identity information of equipment registration and the like) in the network.
2. The Internet of things equipment, the Internet of things platform provider and the third party service provider are all registered on the chain, are users on the chain, and have unique BID identities, and the BID identities are recorded on the chain.
3. The internet of things device a initiates a music service request (third party service request) to the internet of things platform to which it belongs.
4. A third party service provider (third party service provider) generates and sends an authentication request to the device.
5. The equipment compares and verifies the identity information of the equipment and the on-chain information (the BID and the BID document of the equipment are recorded on the chain) through a local identity Service (SIOP), generates verification information, and returns the verification information to a third party service provider.
6. And the third party service provider verifies the request, and the music service can be provided for the equipment after verification.
In summary, the third party service providing method based on the blockchain provided by the embodiment of the invention realizes the following steps:
1) The embodiment of the invention adopts the digital identity based on the blockchain, adopts the form of self-distribution and self-verification of the identity, does not use a centralized mode to store the identity and the association relationship of the identity, and protects the identity safety of equipment.
2) The embodiment of the invention avoids the URI and UTI information of the access service of the storage device and the privacy disclosure of the user from the source.
Therefore, the third party service providing method based on the blockchain improves the security of providing the third party service in the Internet of things.
The embodiment of the invention also provides a third party service providing method based on the block chain, which is applied to the Internet of things equipment, and the method is described in the following embodiment. Since the principle of the method for solving the problem is similar to that of the third party service providing method based on the block chain, which is applied to the system, the implementation of the method can be referred to the implementation of the third party service providing method based on the block chain, which is applied to the system, and the repetition is omitted.
FIG. 8 is a flowchart of a third party service providing method based on a blockchain applied to an Internet of things device according to an embodiment of the present invention, wherein third party service participant nodes form a blockchain network; the third party service participant node comprises: the system comprises an Internet of things platform, a third party service provider node and Internet of things equipment; as shown in fig. 8, the method includes the steps of:
step 201: receiving a third party service request initiated by a user; the third party service request comprises equipment information and service information, wherein the equipment information comprises an Internet of things equipment identifier, and the service information comprises a resource identifier URL of the third party service;
step 202: sending a third party service request to an Internet of things platform to which the Internet of things equipment belongs;
step 203: receiving a verification request sent by an Internet of things platform; the verification request comprises a blockchain identification BID and a third party BID URL of a third party service provider;
Step 204: analyzing a third party BID document according to the BID of the third party service provider in the verification request;
Step 205: obtaining BIDs of the third party service provider registered in advance on the blockchain from the blockchain network according to verification attributes corresponding to the third party BID URLs;
Step 206: obtaining a third party BID document fed back by the blockchain according to the BID of a third party service provider on the blockchain;
step 207: comparing the analyzed third party BID document with the third party BID document fed back by the blockchain, and if the analyzed third party BID document is consistent with the third party BID document fed back by the blockchain, generating a verification response; the verification response comprises BID of the Internet of things equipment and BID URL of the Internet of things equipment;
Step 208: and sending the verification response to the Internet of things platform.
The embodiment of the invention also provides a third party service providing method based on the blockchain, which is applied to the third party service provider node, and the method is described in the following embodiment. Since the principle of the method for solving the problem is similar to that of the third party service providing method based on the blockchain applied to the system, the implementation of the method can refer to the implementation of the third party service providing method based on the blockchain applied to the third party service provider node, and the repetition is omitted.
FIG. 9 is a flow chart of a third party service providing method based on blockchain applied to third party service provider nodes in an embodiment of the invention, the third party service participant nodes forming a blockchain network; the third party service participant node comprises: the system comprises an Internet of things platform, a third party service provider node and Internet of things equipment; as shown in fig. 9, the method includes the steps of:
Step 301: receiving a third party service request sent by a block chain network; the third party service request comprises equipment information and service information, wherein the equipment information comprises an Internet of things equipment identifier, and the service information comprises a resource identifier URL of the third party service;
step 302: generating an identity verification request according to the third party service request; the verification request comprises a blockchain identification BID and a third party BID URL of a third party service provider;
Step 303: sending a validation request to a blockchain network;
Step 304: receiving a verification response sent through the blockchain network; the verification response comprises BID of the Internet of things equipment and BID URL of the Internet of things equipment;
step 305: according to BID of the Internet of things equipment, analyzing an Internet of things equipment BID document;
step 306: obtaining the BID of the Internet of things equipment pre-registered on the blockchain from the blockchain network according to the verification attribute corresponding to the BID URL of the Internet of things equipment;
Step 307: obtaining an Internet of things device BID document fed back by the blockchain according to the Internet of things device BID on the blockchain;
step 308: and comparing the analyzed BID document of the Internet of things equipment with the BID document of the Internet of things equipment fed back by the blockchain, and providing a third party service if the analyzed BID document of the Internet of things equipment is consistent with the BID document of the Internet of things equipment fed back by the blockchain.
The embodiment of the invention also provides a third party service providing system based on the block chain, which is described in the following embodiment. Since the principle of the system for solving the problem is similar to that of the third party service providing method based on the block chain, which is applied to the system, the implementation of the system can refer to the implementation of the third party service providing method based on the block chain, which is applied to the system, and the repetition is omitted.
FIG. 10 is a schematic diagram of a third party service providing system based on a blockchain in an embodiment of the present invention, wherein third party service participant nodes form a blockchain network; the third party service participant node comprises: the system comprises an Internet of things platform, a third party service provider node and Internet of things equipment; wherein, as shown in fig. 10:
The internet of things device 01 is used for receiving a third party service request initiated by a user and sending the third party service request to an internet of things platform to which the internet of things device belongs; the third party service request comprises equipment information and service information, wherein the equipment information comprises an Internet of things equipment identifier, and the service information comprises a resource identifier URL of the third party service; analyzing a third party BID document according to the BID of the third party service provider in the verification request; obtaining BIDs of the third party service provider registered in advance on the blockchain from the blockchain network according to verification attributes corresponding to the third party BID URLs, and obtaining third party BID documents fed back by the blockchain according to the BIDs of the third party service provider on the blockchain; comparing the analyzed third party BID document with the third party BID document fed back by the blockchain, if the third party BID document is consistent with the third party BID document, generating a verification response, and sending the verification response to the Internet of things platform; the verification response comprises BID of the Internet of things equipment and BID URL of the Internet of things equipment;
The internet of things platform 02 is configured to receive the third party service request and send the third party service request to a blockchain network; receiving a verification request sent by a block chain network, and sending the verification request to the Internet of things equipment; receiving a verification response sent by the block chain network, and sending the verification response to the block chain network;
A third party service provider node 03, configured to receive a third party service request sent through the blockchain network, generate an authentication request according to the third party service request, and send the authentication request to the blockchain network; the verification request comprises a blockchain identification BID and a third party BID URL of a third party service provider; receiving a verification response sent by a block chain network, and analyzing an Internet of things device BID document according to the BID of the Internet of things device; obtaining the BID of the Internet of things equipment which is registered on the blockchain in advance from the blockchain network according to the verification attribute corresponding to the BID URL of the Internet of things equipment, and obtaining a BID document of the Internet of things equipment fed back by the blockchain according to the BID of the Internet of things equipment on the blockchain; and comparing the analyzed BID document of the Internet of things equipment with the BID document of the Internet of things equipment fed back by the blockchain, and providing a third party service if the analyzed BID document of the Internet of things equipment is consistent with the BID document of the Internet of things equipment fed back by the blockchain.
In one embodiment, the internet of things device may also be used to pre-register the internet of things device BID onto the blockchain as follows:
Obtaining a BID document of the Internet of things equipment through a self-distributing open identity connection providing program SIOP installed on the Internet of things equipment;
receiving an internet of things device certificate VC issued by an internet of things platform for internet of things devices;
And initiating a registration request according to the BID document of the Internet of things device and the VC of the Internet of things device to obtain the BID of the Internet of things device.
In one embodiment, the third party service provider node may be specifically configured to: and receiving a third party service request sent by the blockchain network, generating an identity verification request according to the third party service request, carrying out encryption processing on the verification request, and sending the encrypted verification request to the blockchain network.
In one embodiment, the internet of things device may also be used to sign and encrypt the authentication response;
the third party service provider node may also be configured to sign and decrypt authentication responses sent over the blockchain network.
In one embodiment, the authentication request may further include: a validation response type and a validation protocol type; the validation response further includes: and verifying the content corresponding to the response type.
The embodiment of the invention also provides a third party service providing Internet of things device based on the blockchain, as described in the following embodiment. Because the principle of solving the problem of the internet of things device is similar to that of the third party service providing method based on the block chain, which is applied to the system, the implementation of the internet of things device can refer to the implementation of the third party service providing method based on the block chain, which is applied to the system, and the repetition is omitted.
FIG. 11 is a schematic structural diagram of a third party service providing Internet of things device based on a blockchain in an embodiment of the present invention, wherein third party service participant nodes form a blockchain network; the third party service participant node comprises: the system comprises an Internet of things platform, a third party service provider node and Internet of things equipment; as shown in fig. 11, the internet of things device includes:
A first receiving unit 011, configured to receive a third party service request initiated by a user; receiving a verification request sent by an Internet of things platform; the third party service request comprises equipment information and service information, wherein the equipment information comprises an Internet of things equipment identifier, and the service information comprises a resource identifier URL of the third party service; the verification request comprises a blockchain identification BID and a third party BID URL of a third party service provider;
A first sending unit 012, configured to send a third party service request to an internet of things platform to which the internet of things device belongs; sending the verification response to the Internet of things platform;
A first parsing unit 013, configured to parse a third party BID document according to the BID of the third party service provider in the verification request;
A first obtaining unit 014 for obtaining, from the blockchain network, the BID of the third-party service provider registered in advance on the blockchain according to the verification attribute corresponding to the third-party BID URL;
a first determining unit 015, configured to obtain a third party BID document fed back by the blockchain according to the BID of the third party service provider on the blockchain;
the first comparison unit 016 is used for comparing the analyzed third party BID document with the third party BID document fed back by the blockchain;
the first generating unit 017 is configured to generate a verification response when the parsed third party BID document is consistent with the third party BID document fed back by the blockchain; the verification response comprises BID of the Internet of things equipment and BID URL of the Internet of things equipment.
The embodiment of the invention also provides a third party service provider node based on the blockchain, as described in the following embodiment. Because the third party service provider node has a similar principle of solving the problem as the third party service providing method based on the blockchain applied to the system, the implementation of the third party service provider node can refer to the implementation of the third party service providing method based on the blockchain applied to the system, and the repetition is omitted.
FIG. 12 is a schematic diagram of a third party service provider node based on a blockchain in an embodiment of the invention, the third party service participant nodes forming a blockchain network; the third party service participant node comprises: the system comprises an Internet of things platform, a third party service provider node and Internet of things equipment; as shown in fig. 12, the third party service provider node includes:
A second receiving unit 031, configured to receive a third party service request sent through a blockchain network; receiving a verification response sent through the blockchain network; the third party service request comprises equipment information and service information, wherein the equipment information comprises an Internet of things equipment identifier, and the service information comprises a resource identifier URL of the third party service; the verification response comprises BID of the Internet of things equipment and BID URL of the Internet of things equipment;
a second generating unit 032, configured to generate an authentication request according to a third party service request; the verification request comprises a blockchain identification BID and a third party BID URL of a third party service provider;
A second sending unit 033 for sending a verification request to the blockchain network;
The second parsing unit 034 is configured to parse the BID document of the Internet of things device according to the BID of the Internet of things device;
A second obtaining unit 035, configured to obtain, from the blockchain network, the internet of things device BID registered in advance on the blockchain according to the verification attribute corresponding to the internet of things device BID URL;
The second determining unit 036 is configured to obtain a blockchain-fed-back internet of things device BID document according to the internet of things device BID on the blockchain;
The second comparison unit 037 is configured to compare the analyzed internet of things device BID document with the blockchain fed back internet of things device BID document;
The providing unit 038 is configured to provide a third party service when the parsed BID document of the internet of things device is consistent with the BID document of the internet of things device fed back by the blockchain.
The embodiment of the invention also provides computer equipment, which comprises a memory, a processor and a computer program stored on the memory and capable of running on the processor, wherein the third party service providing method based on the block chain is realized when the processor executes the computer program.
The embodiment of the invention also provides a computer readable storage medium which stores a computer program for executing the third party service providing method based on the blockchain.
The third party service providing scheme based on the block chain provided by the embodiment of the invention has the beneficial technical effects that: it is possible to realize secure provision of the third party service.
It will be appreciated by those skilled in the art that embodiments of the present invention may be provided as a method, system, or computer program product. Accordingly, the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, the present invention may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, and the like) having computer-usable program code embodied therein.
The present invention is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems) and computer program products according to embodiments of the invention. It will be understood that each flow and/or block of the flowchart illustrations and/or block diagrams, and combinations of flows and/or blocks in the flowchart illustrations and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instruction means which implement the function specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
The foregoing description of the embodiments has been provided for the purpose of illustrating the general principles of the invention, and is not meant to limit the scope of the invention, but to limit the invention to the particular embodiments, and any modifications, equivalents, improvements, etc. that fall within the spirit and principles of the invention are intended to be included within the scope of the invention.

Claims (9)

1. A third party service providing method based on block chain is characterized in that a third party service participant node forms a block chain network; the third party service participant node comprises: the system comprises an Internet of things platform, a third party service provider node and Internet of things equipment; the third party service providing method based on the blockchain comprises the following steps:
The method comprises the steps that the Internet of things equipment receives a third party service request initiated by a user and sends the third party service request to an Internet of things platform to which the Internet of things equipment belongs; the third party service request comprises equipment information and service information, wherein the equipment information comprises an Internet of things equipment identifier, and the service information comprises a resource identifier URL of the third party service;
The Internet of things platform to which the Internet of things equipment belongs receives the third party service request and sends the third party service request to a block chain network;
the third party service provider node receives a third party service request sent by the blockchain network, generates an identity verification request according to the third party service request, and sends the verification request to the blockchain network; the verification request comprises a blockchain identification BID and a third party BID URL of a third party service provider;
the method comprises the steps that an internet of things platform receives a verification request sent through a blockchain network and sends the verification request to internet of things equipment;
The Internet of things device analyzes a third party BID document according to the BID of the third party service provider in the verification request; obtaining BIDs of the third party service provider registered in advance on the blockchain from the blockchain network according to verification attributes corresponding to the third party BID URLs, and obtaining third party BID documents fed back by the blockchain according to the BIDs of the third party service provider on the blockchain; comparing the analyzed third party BID document with the third party BID document fed back by the blockchain, if the third party BID document is consistent with the third party BID document, generating a verification response, and sending the verification response to the Internet of things platform; the verification response comprises BID of the Internet of things equipment and BID URL of the Internet of things equipment;
the method comprises the steps that an internet of things platform receives a verification response sent by a block chain network and sends the verification response to the block chain network;
The third party service provider node receives the verification response sent by the blockchain network, and analyzes the BID document of the Internet of things device according to the BID of the Internet of things device; obtaining the BID of the Internet of things equipment which is registered on the blockchain in advance from the blockchain network according to the verification attribute corresponding to the BID URL of the Internet of things equipment, and obtaining a BID document of the Internet of things equipment fed back by the blockchain according to the BID of the Internet of things equipment on the blockchain; comparing the analyzed BID document of the Internet of things equipment with the BID document of the Internet of things equipment fed back by the blockchain, and providing a third party service if the analyzed BID document of the Internet of things equipment is consistent with the BID document of the Internet of things equipment fed back by the blockchain;
the third party service providing method based on the block chain further comprises the following steps: the method comprises the following steps of pre-registering the BID of the Internet of things device on a blockchain: obtaining the BID of the Internet of things equipment through a self-distributing open identity connection providing program SIOP installed on the Internet of things equipment; and initiating a registration request according to the BID of the Internet of things equipment, and registering the BID of the Internet of things equipment on the blockchain in advance.
2. The blockchain-based third party service providing method of claim 1, wherein the third party service provider node receives the third party service request sent through the blockchain network, generates an authentication request according to the third party service request, and sends the authentication request to the blockchain network, comprising:
and the third party service provider node receives the third party service request sent by the blockchain network, generates an identity verification request according to the third party service request, encrypts the verification request, and sends the encrypted verification request to the blockchain network.
3. A third party service providing method based on block chain is characterized in that a third party service participant node forms a block chain network; the third party service participant node comprises: the system comprises an Internet of things platform, a third party service provider node and Internet of things equipment; the third party service providing method based on the blockchain comprises the following steps:
Receiving a third party service request initiated by a user; the third party service request comprises equipment information and service information, wherein the equipment information comprises an Internet of things equipment identifier, and the service information comprises a resource identifier URL of the third party service;
Sending a third party service request to an Internet of things platform to which the Internet of things equipment belongs;
receiving a verification request sent by an Internet of things platform; the verification request comprises a blockchain identification BID and a third party BID URL of a third party service provider;
Analyzing a third party BID document according to the BID of the third party service provider in the verification request;
obtaining BIDs of the third party service provider registered in advance on the blockchain from the blockchain network according to verification attributes corresponding to the third party BID URLs;
obtaining a third party BID document fed back by the blockchain according to the BID of a third party service provider on the blockchain;
Comparing the analyzed third party BID document with the third party BID document fed back by the blockchain, and if the analyzed third party BID document is consistent with the third party BID document fed back by the blockchain, generating a verification response; the verification response comprises BID of the Internet of things equipment and BID URL of the Internet of things equipment; the BID of the Internet of things equipment is registered on a blockchain in advance according to the following method: obtaining the BID of the Internet of things equipment through a self-distributing open identity connection providing program SIOP installed on the Internet of things equipment; initiating a registration request according to the BID of the Internet of things equipment, and registering the BID of the Internet of things equipment on a blockchain in advance;
and sending the verification response to the Internet of things platform.
4. A third party service providing method based on block chain is characterized in that a third party service participant node forms a block chain network; the third party service participant node comprises: the system comprises an Internet of things platform, a third party service provider node and Internet of things equipment; the third party service providing method based on the blockchain comprises the following steps:
Receiving a third party service request sent by a block chain network; the third party service request comprises equipment information and service information, wherein the equipment information comprises an Internet of things equipment identifier, and the service information comprises a resource identifier URL of the third party service;
Generating an identity verification request according to the third party service request; the verification request comprises a blockchain identification BID and a third party BID URL of a third party service provider;
Sending a validation request to a blockchain network;
Receiving a verification response sent through the blockchain network; the verification response comprises BID of the Internet of things equipment and BID URL of the Internet of things equipment; the BID of the Internet of things equipment is registered on a blockchain in advance according to the following method: obtaining the BID of the Internet of things equipment through a self-distributing open identity connection providing program SIOP installed on the Internet of things equipment; initiating a registration request according to the BID of the Internet of things equipment, and registering the BID of the Internet of things equipment on a blockchain in advance;
according to BID of the Internet of things equipment, analyzing an Internet of things equipment BID document;
Obtaining the BID of the Internet of things equipment pre-registered on the blockchain from the blockchain network according to the verification attribute corresponding to the BID URL of the Internet of things equipment;
obtaining an Internet of things device BID document fed back by the blockchain according to the Internet of things device BID on the blockchain;
And comparing the analyzed BID document of the Internet of things equipment with the BID document of the Internet of things equipment fed back by the blockchain, and providing a third party service if the analyzed BID document of the Internet of things equipment is consistent with the BID document of the Internet of things equipment fed back by the blockchain.
5. A third party service providing system based on a block chain, wherein third party service participant nodes form a block chain network; the third party service participant node comprises: the system comprises an Internet of things platform, a third party service provider node and Internet of things equipment; the third party service providing system based on the blockchain comprises:
The internet of things device is used for receiving a third party service request initiated by a user and sending the third party service request to an internet of things platform to which the internet of things device belongs; the third party service request comprises equipment information and service information, wherein the equipment information comprises an Internet of things equipment identifier, and the service information comprises a resource identifier URL of the third party service; analyzing a third party BID document according to the BID of the third party service provider in the verification request; obtaining BIDs of the third party service provider registered in advance on the blockchain from the blockchain network according to verification attributes corresponding to the third party BID URLs, and obtaining third party BID documents fed back by the blockchain according to the BIDs of the third party service provider on the blockchain; comparing the analyzed third party BID document with the third party BID document fed back by the blockchain, if the third party BID document is consistent with the third party BID document, generating a verification response, and sending the verification response to the Internet of things platform; the verification response comprises BID of the Internet of things equipment and BID URL of the Internet of things equipment; the BID of the Internet of things equipment is registered on a blockchain in advance according to the following method: obtaining the BID of the Internet of things equipment through a self-distributing open identity connection providing program SIOP installed on the Internet of things equipment; initiating a registration request according to the BID of the Internet of things equipment, and registering the BID of the Internet of things equipment on a blockchain in advance;
The internet of things platform is used for receiving the third party service request and sending the third party service request to a blockchain network; receiving a verification request sent by a block chain network, and sending the verification request to the Internet of things equipment; receiving a verification response sent by the block chain network, and sending the verification response to the block chain network;
The third party service provider node is used for receiving a third party service request sent by the blockchain network, generating an identity verification request according to the third party service request, and sending the verification request to the blockchain network; the verification request comprises a blockchain identification BID and a third party BID URL of a third party service provider; receiving a verification response sent by a block chain network, and analyzing an Internet of things device BID document according to the BID of the Internet of things device; obtaining the BID of the Internet of things equipment which is registered on the blockchain in advance from the blockchain network according to the verification attribute corresponding to the BID URL of the Internet of things equipment, and obtaining a BID document of the Internet of things equipment fed back by the blockchain according to the BID of the Internet of things equipment on the blockchain; and comparing the analyzed BID document of the Internet of things equipment with the BID document of the Internet of things equipment fed back by the blockchain, and providing a third party service if the analyzed BID document of the Internet of things equipment is consistent with the BID document of the Internet of things equipment fed back by the blockchain.
6. The third party service providing internet of things equipment based on the blockchain is characterized in that third party service participant nodes form a blockchain network; the third party service participant node comprises: the system comprises an Internet of things platform, a third party service provider node and Internet of things equipment; the third party service providing internet of things device based on the blockchain includes:
The first receiving unit is used for receiving a third party service request initiated by a user; receiving a verification request sent by an Internet of things platform; the third party service request comprises equipment information and service information, wherein the equipment information comprises an Internet of things equipment identifier, and the service information comprises a resource identifier URL of the third party service; the verification request comprises a blockchain identification BID and a third party BID URL of a third party service provider;
the first sending unit is used for sending the third party service request to an Internet of things platform to which the Internet of things equipment belongs; sending the verification response to the Internet of things platform;
The first analyzing unit is used for analyzing the third party BID document according to the BID of the third party service provider in the verification request;
A first obtaining unit, configured to obtain, from a blockchain network, a BID of a third party service provider registered in advance on a blockchain according to a verification attribute corresponding to a third party BID URL;
the first determining unit is used for obtaining a third party BID document fed back by the blockchain according to the BID of a third party service provider on the blockchain;
the first comparison unit is used for comparing the analyzed third party BID document with the third party BID document fed back by the blockchain;
The first generation unit is used for generating a verification response when the analyzed third party BID document is consistent with the third party BID document fed back by the blockchain; the verification response comprises BID of the Internet of things equipment and BID URL of the Internet of things equipment; the BID of the Internet of things equipment is registered on a blockchain in advance according to the following method: obtaining the BID of the Internet of things equipment through a self-distributing open identity connection providing program SIOP installed on the Internet of things equipment; and initiating a registration request according to the BID of the Internet of things equipment, and registering the BID of the Internet of things equipment on the blockchain in advance.
7. A third party service provider node based on a blockchain, wherein the third party service participant nodes form a blockchain network; the third party service participant node comprises: the system comprises an Internet of things platform, a third party service provider node and Internet of things equipment; the blockchain-based third party service provider node includes:
The second receiving unit is used for receiving a third party service request sent by the block chain network; receiving a verification response sent through the blockchain network; the third party service request comprises equipment information and service information, wherein the equipment information comprises an Internet of things equipment identifier, and the service information comprises a resource identifier URL of the third party service; the verification response comprises BID of the Internet of things equipment and BID URL of the Internet of things equipment; the BID of the Internet of things equipment is registered on a blockchain in advance according to the following method: obtaining the BID of the Internet of things equipment through a self-distributing open identity connection providing program SIOP installed on the Internet of things equipment; initiating a registration request according to the BID of the Internet of things equipment, and registering the BID of the Internet of things equipment on a blockchain in advance;
the second generation unit is used for generating an identity verification request according to the third-party service request; the verification request comprises a blockchain identification BID and a third party BID URL of a third party service provider;
a second transmitting unit for transmitting the authentication request to the blockchain network;
The second analysis unit is used for analyzing the BID document of the Internet of things equipment according to the BID of the Internet of things equipment;
the second obtaining unit is used for obtaining the BID of the Internet of things equipment which is registered on the blockchain in advance from the blockchain network according to the verification attribute corresponding to the BID URL of the Internet of things equipment;
the second determining unit is used for obtaining an Internet of things device BID document fed back by the blockchain according to the Internet of things device BID on the blockchain;
the second comparison unit is used for comparing the analyzed BID document of the Internet of things equipment with the BID document of the Internet of things equipment fed back by the blockchain;
The providing unit is used for providing a third party service when the analyzed BID document of the Internet of things device is consistent with the BID document of the Internet of things device fed back by the blockchain.
8. A computer device comprising a memory, a processor and a computer program stored on the memory and executable on the processor, characterized in that the processor implements the method of any of claims 1 to 4 when executing the computer program.
9. A computer readable storage medium, characterized in that the computer readable storage medium stores a computer program for executing the method of any one of claims 1 to 4.
CN202111020261.6A 2021-09-01 2021-09-01 Third party service providing method, system and related nodes based on block chain Active CN113746916B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202111020261.6A CN113746916B (en) 2021-09-01 2021-09-01 Third party service providing method, system and related nodes based on block chain

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202111020261.6A CN113746916B (en) 2021-09-01 2021-09-01 Third party service providing method, system and related nodes based on block chain

Publications (2)

Publication Number Publication Date
CN113746916A CN113746916A (en) 2021-12-03
CN113746916B true CN113746916B (en) 2024-06-18

Family

ID=78734630

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202111020261.6A Active CN113746916B (en) 2021-09-01 2021-09-01 Third party service providing method, system and related nodes based on block chain

Country Status (1)

Country Link
CN (1) CN113746916B (en)

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114499872B (en) * 2021-12-24 2024-05-28 浪潮工业互联网股份有限公司 Starfire chain crossing method and device based on industrial Internet
CN115396165B (en) * 2022-08-15 2024-05-14 中国联合网络通信集团有限公司 File management method and device, electronic equipment and storage medium

Family Cites Families (15)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN109714174B (en) * 2019-02-18 2021-08-17 中国科学院合肥物质科学研究院 Internet of things equipment digital identity management system and method based on block chain
CN109918878B (en) * 2019-04-24 2021-03-02 中国科学院信息工程研究所 Industrial Internet of things equipment identity authentication and safe interaction method based on block chain
WO2021006616A1 (en) * 2019-07-11 2021-01-14 Coinplug, Inc. Method for providing relational decentralized identifier service and blockchain node using the same
CN110619526A (en) * 2019-09-19 2019-12-27 阿里巴巴集团控股有限公司 Business service providing method, device, equipment and system based on block chain
KR102214647B1 (en) * 2019-11-26 2021-02-15 부산대학교 산학협력단 System and method for providing interface for interworking between heterogeneous iot platform devices
CN111277577B (en) * 2020-01-14 2022-06-07 北京百度网讯科技有限公司 Digital identity verification method, device, equipment and storage medium
CN111415163B (en) * 2020-04-30 2024-04-19 中国银行股份有限公司 Block chain-based service processing and verifying method, system and verifying node
CN111835528B (en) * 2020-07-16 2023-04-07 广州大学 Decentralized Internet of things cross-domain access authorization method and system
CN111884815A (en) * 2020-08-07 2020-11-03 上海格尔安全科技有限公司 Block chain-based distributed digital certificate authentication system
CN111970299A (en) * 2020-08-26 2020-11-20 上海和数软件有限公司 Block chain-based distributed Internet of things equipment identity authentication device and method
CN112702346B (en) * 2020-12-24 2024-05-10 国网浙江省电力有限公司电力科学研究院 Distributed identity authentication method and system based on alliance chain
CN112580102A (en) * 2020-12-29 2021-03-30 郑州大学 Multi-dimensional digital identity authentication system based on block chain
CN112966044B (en) * 2021-02-26 2022-09-02 支付宝(杭州)信息技术有限公司 Data storage method and system of IOT (input/output) equipment based on block chain
CN113163012B (en) * 2021-04-26 2022-08-16 物鼎安全科技(武汉)有限公司 Internet of things equipment management method and device based on block chain
CN113239398A (en) * 2021-05-11 2021-08-10 支付宝(杭州)信息技术有限公司 Service processing method and device

Non-Patent Citations (2)

* Cited by examiner, † Cited by third party
Title
DPKI: A Blockchain-Based Decentralized Public Key Infrastructure System;A. Papageorgiou, A. Mygiakis, K. Loupos and T. Krousarlis;2020 Global Internet of Things Summit (GIoTS), Dublin, Ireland, 2020;20200617;全文 *
基于区块链的身份管理认证研究;***;陈宇翔;张兆雷;白健;郝尧;;计算机科学;20181115(第11期);全文 *

Also Published As

Publication number Publication date
CN113746916A (en) 2021-12-03

Similar Documents

Publication Publication Date Title
US11184394B1 (en) Methods, systems, and devices for encrypted electronic storage and confidential network transfer of private data through a trustless distributed ledger technology system
US11606352B2 (en) Time-based one time password (TOTP) for network authentication
US10027670B2 (en) Distributed authentication
US11676133B2 (en) Method and system for mobile cryptocurrency wallet connectivity
US10567377B2 (en) Multifactor privacy-enhanced remote identification using a rich credential
US7428749B2 (en) Secure delegation using public key authorization
Mukta et al. Blockchain-based verifiable credential sharing with selective disclosure
US6993652B2 (en) Method and system for providing client privacy when requesting content from a public server
CN109327481B (en) Block chain-based unified online authentication method and system for whole network
CN109617692B (en) Anonymous login method and system based on block chain
CN114730420A (en) System and method for generating signatures
US20100122082A1 (en) User identity validation system and method
US20200412554A1 (en) Id as service based on blockchain
KR102330012B1 (en) Authentication System and Method based on anonymous protocol in Permissioned Blockchain, Recording Medium for Performing the Method
CN113746916B (en) Third party service providing method, system and related nodes based on block chain
CN111683090A (en) Block chain digital signature method and device based on distributed storage
Li et al. A Blockchain‐Based Public Auditing Protocol with Self‐Certified Public Keys for Cloud Data
CN110597836A (en) Information query request response method and device based on block chain network
CN110138558A (en) Transmission method, equipment and the computer readable storage medium of session key
WO2017020669A1 (en) Method and device for authenticating identity of node in distributed system
US20220263818A1 (en) Using a service worker to present a third-party cryptographic credential
CN115189884A (en) Multistage signature method with anonymity for alliance block chain
US10608997B1 (en) Context-based data access control
CN113449032B (en) System and method for interaction of block chain off-link data with verifiable data uplink
CN114915494B (en) Anonymous authentication method, system, equipment and storage medium

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
CB02 Change of applicant information

Country or region after: China

Address after: 101399 No. 8, Airport East Road, Shunyi Park, Zhongguancun Science Park, Shunyi District, Beijing

Applicant after: Beijing Taier Yingfu Technology Co.,Ltd.

Address before: 615, building 27, No. 40, Xueyuan Road, Haidian District, Beijing 100095

Applicant before: BEIJING TELEINFO NETWORK TECHNOLOGY CO.,LTD.

Country or region before: China

CB02 Change of applicant information
GR01 Patent grant